Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153947.roa
File: AS153947.roa (raw, json)
Hash identifier: VntfTbPmjx2BLTcOossDMUjWfbuTBxHIlsx0E2wEjxg=
Subject key identifier: AF:E2:6C:1F:67:08:10:7E:16:DB:0A:F1:B8:CD:78:35:A0:97:00:38
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1AE523908C961FAFC8DE0AA09A48CA403AA5E6D8
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153947.roa
Signing time: Wed 29 Jul 2026 02:24:43 +0000
ROA not before: Wed 29 Jul 2026 02:19:43 +0000
ROA not after: Wed 28 Jul 2027 02:24:43 +0000
asID: 153947
IP address blocks: 167.148.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jul 2026 07:16:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e5:23:90:8c:96:1f:af:c8:de:0a:a0:9a:48:ca:40:3a:a5:e6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Jul 29 02:19:43 2026 GMT
Not After : Jul 28 02:24:43 2027 GMT
Subject: CN=AFE26C1F6708107E16DB0AF1B8CD7835A0970038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:0d:db:73:c3:63:0c:a4:e9:f8:8d:9b:e0:
70:d6:fe:b4:9b:75:d2:e8:9f:d2:d2:ea:16:81:f9:
43:bc:39:90:35:79:01:7d:7b:11:12:5c:82:5c:d6:
8d:d7:e0:07:d5:c9:59:33:63:36:a3:ed:a9:71:41:
28:02:0b:61:04:d9:b8:18:b3:8f:ee:7e:ec:46:eb:
f1:fb:75:f4:39:55:56:29:4f:71:0a:32:18:eb:90:
60:b4:90:7b:a7:be:b1:4c:52:64:1e:96:25:38:e0:
97:b9:83:8d:85:29:10:b1:a7:48:87:bc:93:84:69:
12:54:ee:54:05:b6:d1:48:90:52:72:52:fa:df:8c:
a1:5a:3b:b4:f4:62:80:c8:d4:36:1f:01:80:bd:d5:
1e:3f:06:e9:f3:22:16:2f:eb:61:ad:56:79:87:c4:
0c:03:94:2c:f5:34:07:0b:c3:26:cc:a6:f2:2c:7d:
f5:14:cf:db:03:11:d2:5d:2f:e0:a1:67:60:1c:2a:
05:0c:d0:ac:0c:c2:c5:bb:92:f6:54:c1:61:ce:6d:
80:d0:aa:81:da:68:c7:00:cb:3e:53:b3:aa:40:61:
a5:35:30:e6:60:56:d9:c8:88:b7:ea:2e:4d:b8:8a:
bb:be:0f:89:c6:7f:69:4c:66:6f:b0:dd:30:9c:03:
0f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E2:6C:1F:67:08:10:7E:16:DB:0A:F1:B8:CD:78:35:A0:97:00:38
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS153947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.148.8.0/24
Signature Algorithm: sha256WithRSAEncryption
98:cf:b9:9c:4b:36:7a:62:36:66:34:2a:5b:fa:30:04:db:fb:
2b:4c:15:8c:80:c0:c4:a8:d8:7b:66:6d:0e:9b:02:dd:4c:83:
da:d6:4a:d4:b3:fd:cd:ac:9e:6d:ad:13:18:59:f4:30:a4:f3:
15:0a:6d:68:28:7b:56:10:42:b9:a4:da:b5:36:ad:7c:87:a7:
70:06:5c:2c:9d:e1:a4:45:69:2c:3e:e0:c9:40:f5:f9:a1:b5:
57:3b:30:f4:f3:3b:e4:42:da:6a:ef:ac:da:73:ba:aa:63:74:
be:65:40:a6:1c:f2:8f:1e:59:a2:b1:bb:b6:0e:91:81:d0:df:
f2:0a:9d:a2:39:81:ab:9e:02:df:e9:75:a5:02:96:04:4f:bc:
e3:e0:2f:81:f2:9d:c3:10:41:41:55:5d:ce:70:cd:20:ef:9a:
ac:08:9b:a1:70:42:93:4d:8a:18:c7:c5:ee:16:47:dd:5b:7b:
84:4b:a2:75:ff:ec:a4:fd:57:2c:8e:a7:20:fd:63:ea:9f:15:
30:90:37:b5:5d:a7:3c:58:11:6d:35:8f:f6:ec:64:1b:cc:04:
3e:9c:eb:5f:e8:41:df:a6:ef:14:6a:81:a5:b0:8e:b0:55:65:
e8:ae:83:73:57:48:9e:4f:d1:59:f6:f5:7e:03:54:a1:fb:1a:
97:3d:ef:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:55:38 2026 by rpki-client